As I mentioned last time , deferred custom actions are generally no impersonate. In this entry, I hope to expand on the postbuild steps to change enable all deferred custom actions in an msi into no impersonate. Doing this via jscript isn't overly difficult;
